$ rpki-client -vvf repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/11489A5805B7FE2710AE32C3077C3450579D1288.mft File: 11489A5805B7FE2710AE32C3077C3450579D1288.mft (raw, json) Hash identifier: gp1OdfzG6vovYpoSea5uQEdJVOPsqrJjpxDmGBzS6KQ= Subject key identifier: 70:28:F4:77:52:B5:6C:FF:97:68:75:14:10:DB:36:77:61:A3:FC:21 Authority key identifier: 11:48:9A:58:05:B7:FE:27:10:AE:32:C3:07:7C:34:50:57:9D:12:88 Certificate issuer: /CN=11489A5805B7FE2710AE32C3077C3450579D1288 Certificate serial: 1E285B7C1350B0C62A4D0A471B0836E81912396E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11489A5805B7FE2710AE32C3077C3450579D1288.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/11489A5805B7FE2710AE32C3077C3450579D1288.mft Manifest number: DF Signing time: Thu 08 May 2025 13:41:46 +0000 Manifest this update: Thu 08 May 2025 13:36:46 +0000 Manifest next update: Sun 11 May 2025 20:20:46 +0000 Files and hashes: 1: 11489A5805B7FE2710AE32C3077C3450579D1288.crl (hash: HhUX2A7JOl/+uQFhf8V9iuL4Q/d8mQIwWQ+owE/r8uk=) 2: 3130332e3131332e32362e302f32342d3234203d3e20313337333339.roa (hash: NOH9wRK9inkAfrcmkP1Y7WHt1AAQ1F9Kr20Q6/2/AlY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/11489A5805B7FE2710AE32C3077C3450579D1288.crl rsync://repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/11489A5805B7FE2710AE32C3077C3450579D1288.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11489A5805B7FE2710AE32C3077C3450579D1288.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 15:40:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:28:5b:7c:13:50:b0:c6:2a:4d:0a:47:1b:08:36:e8:19:12:39:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11489A5805B7FE2710AE32C3077C3450579D1288 Validity Not Before: May 8 13:36:46 2025 GMT Not After : May 11 20:20:46 2025 GMT Subject: CN=7028F47752B56CFF9768751410DB367761A3FC21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:de:fb:98:13:9b:18:c0:20:e6:24:d0:66:23: 9e:0b:4e:75:41:ef:04:12:c1:14:7c:dd:9b:20:8e: 53:04:59:97:96:c3:f2:4a:a5:5d:de:82:2a:57:bf: ef:7d:52:92:22:fb:6d:60:da:89:b8:34:f2:15:12: 6f:72:be:7d:0b:99:27:47:82:e6:8b:67:53:7f:d7: bd:7a:ba:c9:ff:06:cc:d3:8d:16:4f:f1:2f:25:0d: 72:8a:83:b1:d0:3f:20:09:6c:5b:79:bc:39:44:12: a1:d4:08:c8:fc:21:17:1c:d8:1a:f7:53:42:fd:32: fd:86:73:2f:b1:9c:a7:77:46:f8:42:3d:60:ca:13: 49:e8:17:7f:9e:20:25:75:7b:a7:f0:9f:1c:4e:08: 53:16:b2:de:bf:4f:ec:39:59:31:ed:03:58:7b:af: e5:fc:a0:10:34:9b:17:4a:e8:0d:5c:2b:75:03:73: 2f:9a:09:24:26:79:9d:70:86:b0:a2:c3:d2:c9:c9: 34:07:5f:50:a3:45:4b:16:d7:89:0c:49:31:da:42: 13:2c:fb:42:57:14:19:b5:ad:50:5e:8b:39:e5:ab: 43:39:22:d9:31:82:86:e9:c6:99:2c:f0:3f:b1:64: 66:21:fc:65:d8:8a:05:79:91:11:c7:9c:e1:de:87: 74:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:28:F4:77:52:B5:6C:FF:97:68:75:14:10:DB:36:77:61:A3:FC:21 X509v3 Authority Key Identifier: keyid:11:48:9A:58:05:B7:FE:27:10:AE:32:C3:07:7C:34:50:57:9D:12:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/11489A5805B7FE2710AE32C3077C3450579D1288.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11489A5805B7FE2710AE32C3077C3450579D1288.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/11489A5805B7FE2710AE32C3077C3450579D1288.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:d5:0b:e9:7d:32:5b:14:d1:b8:84:c3:74:87:be:6a:93:07: c1:e9:fd:4c:a9:07:97:b9:23:a8:a5:4d:21:41:a4:6f:eb:c5: 1d:a1:c1:1f:80:ef:37:da:e3:39:2b:85:e8:7a:d1:13:c9:72: 16:1b:36:4c:a0:0f:96:83:ed:07:a4:b1:9e:fe:f6:40:a9:fc: d3:22:3b:2b:06:84:b3:11:e1:35:04:30:e3:50:7b:c7:29:16: 43:cc:76:87:d3:f7:94:3b:ab:69:d5:ed:b7:bb:02:35:d4:1e: 2b:8d:1f:cf:de:f6:cf:88:f9:f3:21:64:ff:39:e7:c1:a5:9e: ad:58:a4:17:15:4e:b7:f5:6a:1c:aa:3c:24:a2:61:cb:cf:03: 6e:a7:e5:51:e3:a1:82:91:cf:06:a3:56:32:17:20:fb:ad:e7: 8d:7b:f9:eb:08:0a:48:8d:13:1d:49:9c:d6:c7:4b:b1:3d:a4: 8e:81:ff:65:e6:99:1b:09:7a:fd:04:4c:db:75:d3:bc:c1:3e: 7d:cb:4c:d7:89:2c:4e:51:d1:66:68:61:a9:63:6e:d1:77:49: 83:fe:16:a3:61:64:ff:b1:b2:50:02:8d:df:1b:b1:15:47:21: 9d:e2:63:c7:a0:81:27:61:bd:1b:69:d1:70:ce:d2:2c:a8:6c: fa:9a:2f:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHihbfBNQsMYqTQpHGwg26BkSOW4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE0ODlBNTgwNUI3RkUyNzEwQUUzMkMzMDc3QzM0NTA1 NzlEMTI4ODAeFw0yNTA1MDgxMzM2NDZaFw0yNTA1MTEyMDIwNDZaMDMxMTAvBgNV BAMTKDcwMjhGNDc3NTJCNTZDRkY5NzY4NzUxNDEwREIzNjc3NjFBM0ZDMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC23vuYE5sYwCDmJNBmI54LTnVB 7wQSwRR83ZsgjlMEWZeWw/JKpV3egipXv+99UpIi+21g2om4NPIVEm9yvn0LmSdH guaLZ1N/1716usn/BszTjRZP8S8lDXKKg7HQPyAJbFt5vDlEEqHUCMj8IRcc2Br3 U0L9Mv2Gcy+xnKd3RvhCPWDKE0noF3+eICV1e6fwnxxOCFMWst6/T+w5WTHtA1h7 r+X8oBA0mxdK6A1cK3UDcy+aCSQmeZ1whrCiw9LJyTQHX1CjRUsW14kMSTHaQhMs +0JXFBm1rVBeiznlq0M5Itkxgobpxpks8D+xZGYh/GXYigV5kRHHnOHeh3S3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcCj0d1K1bP+XaHUUENs2d2Gj/CEwHwYDVR0j BBgwFoAUEUiaWAW3/icQrjLDB3w0UFedEogwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWJjZTcxZS00ZWU0LTQ1OTAtOTRmYi0zN2ZmZDlmMGQ2YjcvMC8xMTQ4OUE1ODA1 QjdGRTI3MTBBRTMyQzMwNzdDMzQ1MDU3OUQxMjg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE0ODlBNTgwNUI3RkUyNzEwQUUzMkMzMDc3QzM0NTA1NzlE MTI4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFiY2U3MWUtNGVlNC00NTkwLTk0 ZmItMzdmZmQ5ZjBkNmI3LzAvMTE0ODlBNTgwNUI3RkUyNzEwQUUzMkMzMDc3QzM0 NTA1NzlEMTI4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH7VC+l9MlsU0biEw3SHvmqTB8Hp/UypB5e5 I6ilTSFBpG/rxR2hwR+A7zfa4zkrheh60RPJchYbNkygD5aD7QeksZ7+9kCp/NMi OysGhLMR4TUEMONQe8cpFkPMdofT95Q7q2nV7be7AjXUHiuNH8/e9s+I+fMhZP85 58Glnq1YpBcVTrf1ahyqPCSiYcvPA26n5VHjoYKRzwajVjIXIPut5417+esICkiN Ex1JnNbHS7E9pI6B/2XmmRsJev0ETNt107zBPn3LTNeJLE5R0WZoYaljbtF3SYP+ FqNhZP+xslACjd8bsRVHIZ3iY8eggSdhvRtp0XDO0iyobPqaLwc= -----END CERTIFICATE-----Generated at Thu May 8 20:36:58 2025 by rpki-client